Risk analysis of information systems by event process chains

Information and Communication Technology (ICT) has an important impact on critical infrastructure operation. However, the current use of risk analysis techniques has reached its limits when analysing these systems at least in practical terms. The application of extended event process chains (EPC) bypasses some of the difficulties, as they model business processes within an information system instead of much more complex hardware architectures and software interactions. The methodology described in this paper integrates ARIS (Architecture Integrated Information Systems) and FMEA (Failure Mode and Effects Analysis), i.e., a business modelling method based on EPCs and a risk assessment technique which are well established in their areas of application and branches of competence. A novel risk representation is discussed. The practicability of the methodology is demonstrated by a feasibility study.

Related articles

Balancing water supply and demand—while addressing current and future vulnerabilities to extreme conditions such as drought—is essential to safeguarding the wellbeing of our communities.
Is your city at risk? Identifying where cities have problems and determining how much is at risk is the first step to becoming a strong, resilient city.
In states like California, water shortage is hardly a temporary problem, but there are very serious consequences that put local and state economies at risk. For...

Humans can be exposed to hazardous air pollutants (HAPs) either directly through inhalation or indirectly through ingestion or dermal contact, which can result in acute or chronic health effects. The risk of exposure varies depending on a number of variables, including the meteorological conditions, local geographical and emissions characteristics, the age of the individuals being exposed, and the exposure duration and frequency. To evaluate and quantify the potential health impacts that may result from specific...

Introduction
One of the most dire impacts of anthropogenic climate change is a rise in the global sea level caused by the melting of glaciers and land-based ice caps, as well as a smaller increase from expansion due to the higher temperature of the water itself. Unlike some other predicted effects of climate change, this impact has already been observed for some time. Indeed, not only is there evidence that sea levels are rising; there is also evidence both that the rate of sea level rise has been increasing in...

Ten-year high power prices last week (12-16 September) caused by tight supply margins illustrate the imperative of de-risking your flexible energy procurement strategy.
Towards the end of a turbulent week, prices on the day-ahead over-the-counter market increased to £135 per MWh. This is the highest level in ten years.
The price spike was largely attributed to reduced generation following unplanned outages at key coal and nuclear plants, together with low wind generation and increased air conditioning...

Tailings are considered one of the most relevant sources of contamination associated with mining activities. Phytostabilization of mine spoils may need the application of the adequate combination of amendments to facilitate plant establishment and reduce their environmental impact. Two pot experiments were set up to assess the capability of 2 inorganic materials (calcium carbonate and a red mud derivate, ViroBindTM), alone or in combination with organic amendments, for the stabilization of highly acidic trace...

Customer comments

No comments were found for Risk analysis of information systems by event process chains. Be the first to comment!